From bb348dc2effd9b0207980abfe103fa238ed0a566 Mon Sep 17 00:00:00 2001
From: shahar-h <shahar.harari@sap.com>
Date: Thu, 9 May 2024 19:41:10 +0300
Subject: [PATCH] docs: fix broken BackendTLSPolicy samples (#3362)

Signed-off-by: Shahar Harari <shahar.harari@sap.com>
---
 .../en/latest/tasks/security/backend-tls.md   | 20 +++++++++----------
 .../en/latest/tasks/security/ext-auth.md      | 20 +++++++++----------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/site/content/en/latest/tasks/security/backend-tls.md b/site/content/en/latest/tasks/security/backend-tls.md
index aeedcd503d4..93d155eb30e 100644
--- a/site/content/en/latest/tasks/security/backend-tls.md
+++ b/site/content/en/latest/tasks/security/backend-tls.md
@@ -139,19 +139,19 @@ Create a [BackendTLSPolicy][] instructing Envoy Gateway to establish a TLS conne
 
 ```shell
 cat <<EOF | kubectl apply -f -
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1alpha3
 kind: BackendTLSPolicy
 metadata:
   name: enable-backend-tls
   namespace: default
 spec:
-  targetRef:
-    group: ''
+  targetRefs:
+  - group: ''
     kind: Service
     name: tls-backend
     sectionName: "443"
-  tls:
-    caCertRefs:
+  validation:
+    caCertificateRefs:
     - name: example-ca
       group: ''
       kind: ConfigMap
@@ -165,19 +165,19 @@ Save and apply the following resource to your cluster:
 
 ```yaml
 ---
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1alpha3
 kind: BackendTLSPolicy
 metadata:
   name: enable-backend-tls
   namespace: default
 spec:
-  targetRef:
-    group: ''
+  targetRefs:
+  - group: ''
     kind: Service
     name: tls-backend
     sectionName: "443"
-  tls:
-    caCertRefs:
+  validation:
+    caCertificateRefs:
     - name: example-ca
       group: ''
       kind: ConfigMap
diff --git a/site/content/en/latest/tasks/security/ext-auth.md b/site/content/en/latest/tasks/security/ext-auth.md
index 1676b60ded1..5fc73321106 100644
--- a/site/content/en/latest/tasks/security/ext-auth.md
+++ b/site/content/en/latest/tasks/security/ext-auth.md
@@ -347,18 +347,18 @@ the communication between the Envoy proxy and the gRPC auth service.
 
 ```shell
 cat <<EOF | kubectl apply -f -
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1alpha3
 kind: BackendTLSPolicy
 metadata:
   name: grpc-ext-auth-btls
 spec:
-  targetRef:
-    group: ''
+  targetRefs:
+  - group: ''
     kind: Service
     name: grpc-ext-auth
     sectionName: "9002"
-  tls:
-    caCertRefs:
+  validation:
+    caCertificateRefs:
     - name: grpc-ext-auth-ca
       group: ''
       kind: ConfigMap
@@ -372,18 +372,18 @@ Save and apply the following resource to your cluster:
 
 ```yaml
 ---
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1alpha3
 kind: BackendTLSPolicy
 metadata:
   name: grpc-ext-auth-btls
 spec:
-  targetRef:
-    group: ''
+  targetRefs:
+  - group: ''
     kind: Service
     name: grpc-ext-auth
     sectionName: "9002"
-  tls:
-    caCertRefs:
+  validation:
+    caCertificateRefs:
     - name: grpc-ext-auth-ca
       group: ''
       kind: ConfigMap